a188dbc050b9fca41ed92928d68ed00c562de580 - platform/frameworks/base

commit	a188dbc050b9fca41ed92928d68ed00c562de580	[log] [tgz]
author	Victor Hsieh <victorhsieh@google.com>	Mon Jan 08 12:43:00 2018 -0800
committer	Victor Hsieh <victorhsieh@google.com>	Mon Jan 08 12:43:00 2018 -0800
tree	c8e1a3c081e6c65cd6cce6a490909a1eca8de915
parent	26876815966a46e8a8d73645e93bafe596e05a27 [diff]

Move zygote's seccomp setup to post-fork

Before this change, seccomp filter setup is as early as in zygote's main
function.  To make it possible to split app and system server's filter,
this postpone the setup to after fork.  It also starts to call app
specific and system server specific setup function.

Test: (cts) -m CtsSecurityTestCases -t android.security.cts.SeccompTest
Bug: 63944145

Change-Id: I748735b478405098beac1e200d911c13ea60e380

core/java/android/os/Seccomp.java[diff]
core/java/com/android/internal/os/Zygote.java[diff]
core/java/com/android/internal/os/ZygoteConnection.java[diff]
core/java/com/android/internal/os/ZygoteInit.java[diff]
core/jni/android_os_seccomp.cpp[diff]

5 files changed

tree: c8e1a3c081e6c65cd6cce6a490909a1eca8de915